$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: 5n6BRruiB5va1jsIjTFFRfShJq/0f6MTIvrpn/dscj8= Subject key identifier: C6:59:3C:0C:45:AB:02:D4:21:49:67:79:8A:B3:B5:0A:4D:45:10:8A Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 4F80B254DFA5FA62BAAEE379A57CC11DA7C60A32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:05:14 +0000 Manifest this update: Tue 12 May 2026 22:00:14 +0000 Manifest next update: Wed 13 May 2026 23:49:14 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) 2: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: SeOYJ4MyDeGtENRZsRsrlzXjaci2cmKd9dSXl5XwtMQ=) 3: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) 4: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:80:b2:54:df:a5:fa:62:ba:ae:e3:79:a5:7c:c1:1d:a7:c6:0a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: May 12 22:00:14 2026 GMT Not After : May 13 23:49:14 2026 GMT Subject: CN=C6593C0C45AB02D4214967798AB3B50A4D45108A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:42:bf:56:e4:0c:73:27:74:56:c6:ce:7d: 31:e9:72:1c:5a:20:75:03:29:39:cf:f2:ee:40:8f: 22:52:3a:cb:3c:b8:9e:f2:6b:1d:01:bc:b9:86:d5: 70:1e:a6:e9:b1:d0:9c:62:f5:53:ba:06:96:97:23: 1d:7e:cd:91:a2:bf:72:62:b0:f1:e9:00:b6:b6:61: 45:ff:ea:1b:5f:c1:25:38:88:12:32:74:6a:8a:0f: 7a:15:41:8b:ff:c9:b8:ff:84:95:a7:fe:fa:11:c6: 81:7a:19:e8:2c:f1:ae:77:9f:fd:cf:3b:62:a2:0f: c4:89:bb:d3:df:1c:99:31:05:07:c5:9e:cf:db:d5: 2d:b3:6a:0c:b2:51:6e:4c:ae:a5:8b:c5:59:9a:2a: d7:9e:0a:19:c5:a2:1f:41:07:c8:5c:a9:f4:c3:7d: 2e:8f:c1:e6:19:22:31:3f:1e:b2:67:b0:f7:93:04: 15:31:c7:f4:b5:33:a3:50:86:44:ba:94:95:9d:a9: 23:c8:89:89:61:97:da:31:83:4b:bc:a2:94:56:de: a0:bb:d3:f7:0e:04:0c:07:32:49:b0:1a:a5:e8:75: 5f:94:e6:87:3a:a1:70:79:1a:46:ab:ad:0a:42:28: 0a:21:ae:74:0a:da:e2:7b:56:af:f8:60:3e:57:55: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:3C:0C:45:AB:02:D4:21:49:67:79:8A:B3:B5:0A:4D:45:10:8A X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8d:b4:af:bf:80:de:f9:9d:a0:80:0d:00:70:b3:83:63:08: 9f:46:ce:53:9a:7d:93:87:53:a8:78:07:34:67:98:0e:95:0b: 31:7c:da:10:55:90:f8:e8:d2:93:88:41:29:c6:fb:fb:12:01: 0b:d3:84:1b:ee:5d:31:22:3a:2f:94:59:96:e1:23:ee:5b:e3: 88:fe:0d:d5:a4:aa:9c:8f:18:79:d7:16:34:2a:50:25:04:af: 25:fc:22:3a:7b:1b:07:17:9b:36:0f:cb:2a:ad:47:4e:5e:bd: cb:5e:19:bd:31:23:e4:54:dc:41:de:f8:16:43:3d:0a:7b:54: 80:40:9f:43:ae:c5:27:7f:67:37:b7:42:b3:8d:8a:fb:15:6e: bc:76:a0:ef:ca:b2:34:2a:35:a1:8b:36:0c:35:e1:e7:b2:48: a3:df:ac:9f:e3:3d:c0:fd:9e:ae:73:d2:c6:67:53:19:21:d6: 3d:11:78:36:d5:02:ea:e9:83:f3:b4:ef:6d:d4:fa:a1:02:b6: f6:3a:93:6f:14:0a:31:b7:12:9d:a1:39:dd:ca:23:cb:24:cc: 33:68:58:d9:64:49:2d:60:a6:3f:8e:00:8b:34:4e:95:00:28: 95:d6:4d:aa:be:02:87:2c:65:ef:e1:d6:57:41:58:9f:43:08: f3:ec:8e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4CyVN+l+mK6ruN5pXzBHafGCjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjA1MTIyMjAwMTRaFw0yNjA1MTMyMzQ5MTRaMDMxMTAvBgNV BAMTKEM2NTkzQzBDNDVBQjAyRDQyMTQ5Njc3OThBQjNCNTBBNEQ0NTEwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpz0K/VuQMcyd0VsbOfTHpchxa IHUDKTnP8u5AjyJSOss8uJ7yax0BvLmG1XAepumx0Jxi9VO6BpaXIx1+zZGiv3Ji sPHpALa2YUX/6htfwSU4iBIydGqKD3oVQYv/ybj/hJWn/voRxoF6Gegs8a53n/3P O2KiD8SJu9PfHJkxBQfFns/b1S2zagyyUW5MrqWLxVmaKteeChnFoh9BB8hcqfTD fS6PweYZIjE/HrJnsPeTBBUxx/S1M6NQhkS6lJWdqSPIiYlhl9oxg0u8opRW3qC7 0/cOBAwHMkmwGqXodV+U5oc6oXB5GkarrQpCKAohrnQK2uJ7Vq/4YD5XVb7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlk8DEWrAtQhSWd5irO1Ck1FEIowHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADONtK+/gN75naCADQBws4NjCJ9GzlOafZOH U6h4BzRnmA6VCzF82hBVkPjo0pOIQSnG+/sSAQvThBvuXTEiOi+UWZbhI+5b44j+ DdWkqpyPGHnXFjQqUCUEryX8Ijp7GwcXmzYPyyqtR05evcteGb0xI+RU3EHe+BZD PQp7VIBAn0OuxSd/Zze3QrONivsVbrx2oO/KsjQqNaGLNgw14eeySKPfrJ/jPcD9 nq5z0sZnUxkh1j0ReDbVAurpg/O0723U+qECtvY6k28UCjG3Ep2hOd3KI8skzDNo WNlkSS1gpj+OAIs0TpUAKJXWTaq+AocsZe/h1ldBWJ9DCPPsjnY= -----END CERTIFICATE-----Generated at Wed May 13 01:37:01 2026 by rpki-client